figma-code-connect
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the official
@figma/code-connectpackage from the npm registry for type definitions and CLI functionality. This is a trusted resource from a well-known service provider. - [COMMAND_EXECUTION]: Provides instructions for using the legitimate
figma connectCLI tool to publish component mappings to Figma Dev Mode, which is the intended use case for the Code Connect feature. - [DATA_EXFILTRATION]: Mentions the requirement of a Figma access token for publishing via the CLI, using standard documentation placeholders like
YOUR_ACCESS_TOKENand recommending environment variables for secret management, adhering to security best practices.
Audit Metadata